@things-factory/ai-assistant 10.1.24 → 10.1.26

package/dist-server/index.d.ts

@@ -26,3 +26,4 @@
  * 설계 정본은 `things-factory/docs/design/ai-modules.md`.
  */
 export * from './service/index.js';
+import './tool-registry-boot-report.js';

package/dist-server/index.js

@@ -29,4 +29,5 @@ const tslib_1 = require("tslib");
  * 설계 정본은 `things-factory/docs/design/ai-modules.md`.
  */
 tslib_1.__exportStar(require("./service/index.js"), exports);
+require("./tool-registry-boot-report.js");
 //# sourceMappingURL=index.js.map

package/dist-server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../server/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,6DAAkC","sourcesContent":["/**\n * `@things-factory/ai-assistant` — **AI 대화의 집.**\n *\n * 세션·메시지·참가자·인박스·구독. 도메인을 모른다: 보드도, 공장도, 자산도.\n *\n * ── 왜 board-ai 에서 나왔나 (2026-09-10) ────────────────────────────────────\n * 시작한 물음은 하나였다. **「왜 board-ai 에 종속되어 있는가.」** 공장에 「지금 몇 대 밀렸나」를\n * 묻는 화면이 보드 편집 권한을 요구했고, 그 문 뒤에 스물다섯이 있는데 쓰는 것은 하나였다.\n *\n * 재 보니 문제는 「공통이냐 아니냐」가 아니었다 — `board-ui` 를 지나 **아홉 개 앱**이 이미 이\n * 기계를 싣고 있었다. 이미 공통이었고, 이름과 게이트만 보드 편집기의 것이었다.\n *\n * ── 자르는 선 ───────────────────────────────────────────────────────────────\n * 물음 하나로 줄였다: **「이것이 보드가 없는 제품에서도 뜻이 있나.」**\n *\n *   여기       세션·메시지·참가자·인박스·구독 인증·앵커\n *   board-ai   보드 편집기 — assistant · 패치 · 프리팹 · 컴포넌트 트리 · 스타일링\n *\n * `assistant.ts`(113KB)는 **안 옮겼다.** 거의 전부 보드 편집이다. 가장 큰 파일이 제자리에 있다는\n * 뜻이고, 그래서 이 분리는 생각보다 작았다.\n *\n * ── 의존은 한쪽이다 ─────────────────────────────────────────────────────────\n * `board-ai → ai-assistant`. 반대는 없다. 그것을 위해 두 변을 먼저 끊었다 — `ChatSession` 의\n * 보드 패치 관계와, 리졸버 안에 섞여 있던 보드 op 여섯.\n *\n * 설계 정본은 `things-factory/docs/design/ai-modules.md`.\n */\nexport * from './service/index.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../server/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,6DAAkC;AAClC,0CAAuC","sourcesContent":["/**\n * `@things-factory/ai-assistant` — **AI 대화의 집.**\n *\n * 세션·메시지·참가자·인박스·구독. 도메인을 모른다: 보드도, 공장도, 자산도.\n *\n * ── 왜 board-ai 에서 나왔나 (2026-09-10) ────────────────────────────────────\n * 시작한 물음은 하나였다. **「왜 board-ai 에 종속되어 있는가.」** 공장에 「지금 몇 대 밀렸나」를\n * 묻는 화면이 보드 편집 권한을 요구했고, 그 문 뒤에 스물다섯이 있는데 쓰는 것은 하나였다.\n *\n * 재 보니 문제는 「공통이냐 아니냐」가 아니었다 — `board-ui` 를 지나 **아홉 개 앱**이 이미 이\n * 기계를 싣고 있었다. 이미 공통이었고, 이름과 게이트만 보드 편집기의 것이었다.\n *\n * ── 자르는 선 ───────────────────────────────────────────────────────────────\n * 물음 하나로 줄였다: **「이것이 보드가 없는 제품에서도 뜻이 있나.」**\n *\n *   여기       세션·메시지·참가자·인박스·구독 인증·앵커\n *   board-ai   보드 편집기 — assistant · 패치 · 프리팹 · 컴포넌트 트리 · 스타일링\n *\n * `assistant.ts`(113KB)는 **안 옮겼다.** 거의 전부 보드 편집이다. 가장 큰 파일이 제자리에 있다는\n * 뜻이고, 그래서 이 분리는 생각보다 작았다.\n *\n * ── 의존은 한쪽이다 ─────────────────────────────────────────────────────────\n * `board-ai → ai-assistant`. 반대는 없다. 그것을 위해 두 변을 먼저 끊었다 — `ChatSession` 의\n * 보드 패치 관계와, 리졸버 안에 섞여 있던 보드 op 여섯.\n *\n * 설계 정본은 `things-factory/docs/design/ai-modules.md`.\n */\nexport * from './service/index.js'\nimport './tool-registry-boot-report.js'\n"]}

package/dist-server/service/assistant-chat-resolver.js

@@ -39,6 +39,7 @@ const llm_history_js_1 = require("./chat-message/llm-history.js");
 const chat_message_publish_js_1 = require("./chat-message/chat-message-publish.js");
 const session_activity_publish_js_1 = require("./chat-session/session-activity-publish.js");
 const session_inbox_js_1 = require("./chat-session/session-inbox.js");
+const tool_access_js_1 = require("./tool-access.js");
 /**
  * How many stored messages reach the model.
  *
@@ -84,7 +85,7 @@ tslib_1.__decorate([
 tslib_1.__decorate([
     (0, type_graphql_1.Field)(() => [String], {
         nullable: true,
-        description: 'Registered tool categories this conversation may use (registerToolCategory names, e.g. ["figure-authoring"]). Omit to allow every registered category. An empty list allows none — a plain conversation.'
+        description: 'Registered tool categories this conversation may use (registerToolCategory names, e.g. ["figure-authoring"]). Omitted or empty allows none — a plain conversation. A tool that declares a privilege is offered only to a caller who holds it.'
     }),
     tslib_1.__metadata("design:type", Array)
 ], AssistantChatInput.prototype, "toolCategories", void 0);
@@ -288,6 +289,7 @@ let AssistantChatResolver = class AssistantChatResolver {
             messages: conversation,
             systemPrompt: input.systemPrompt,
             toolCategories: input.toolCategories,
+            toolAccess: (0, tool_access_js_1.toolAccessFor)(context),
             hostContext: input.hostContext,
             state: context.state,
             model: input.model,

package/dist-server/service/assistant-chat-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"assistant-chat-resolver.js","sourceRoot":"","sources":["../../server/service/assistant-chat-resolver.ts"],"names":[],"mappings":";;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,+CAAoG;AACpG,qDAA6C;AAC7C,qCAAkC;AAElC,6CAA4C;AAC5C,iDAAqD;AACrD,mEAAyH;AAEzH,oEAA4D;AAC5D,sFAA8E;AAC9E,oEAA4D;AAC5D,kEAA+D;AAC/D,oFAA2E;AAC3E,4FAAmF;AACnF,sEAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAGhC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;CAM1B,CAAA;AAJC;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;mDAC1C;AAGZ;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;;sDAC3B;AALX,qBAAqB;IAD1B,IAAA,wBAAS,GAAE;GACN,qBAAqB,CAM1B;AAGD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;CAuDvB,CAAA;AAlDC;IAJC,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,kEAAkE;KAChF,CAAC;;qDACgB;AAMlB;IAJC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE;QACpC,WAAW,EACT,2HAA2H;KAC9H,CAAC;;oDAC+B;AAMjC;IAJC,IAAA,oBAAK,EAAC;QACL,WAAW,EACT,uLAAuL;KAC1L,CAAC;;wDACkB;AAOpB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,0MAA0M;KAC7M,CAAC;;0DACuB;AAOzB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,oPAAoP;KACvP,CAAC;;uDACe;AAOjB;IALC,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,oLAAoL;KACvL,CAAC;;kEAC6B;AAO/B;IALC,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,qJAAqJ;KACxJ,CAAC;;iEAC6B;AAG/B;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;;iDAC7F;AAGd;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;;uDACrD;AAGpB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;qDACpD;AAtDd,kBAAkB;IADvB,IAAA,wBAAS,EAAC,EAAE,WAAW,EAAE,6DAA6D,EAAE,CAAC;GACpF,kBAAkB,CAuDvB;AAGD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CA0CxB,CAAA;AAxCC;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;;kDAC1E;AAGb;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;;qDACjD;AAGhB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;;sDAChE;AAGlB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;;0DAC7D;AAGtB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;;+DACnD;AAM3B;IAJC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,iGAAiG;KAC/G,CAAC;;uDACc;AAOhB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,gMAAgM;KACnM,CAAC;;yDACqB;AAOvB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,iLAAiL;KACpL,CAAC;;sDACa;AAOf;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,uLAAuL;KAC1L,CAAC;;8DACqB;AAzCnB,mBAAmB;IADxB,IAAA,yBAAU,GAAE;GACP,mBAAmB,CA0CxB;AAED,SAAS,eAAe;IACtB,MAAM,QAAQ,GAAG,IAAA,mCAAkB,GAAE,CAAA;IACrC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,GAAG,GAAG,YAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAQ,CAAA;IAC/C,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAA,+BAAc,EAAC,GAAG,CAAC,CAAA;IACnD,OAAO,SAAS,CAAA;AAClB,CAAC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC;;;;;OAKG;IAWG,AAAN,KAAK,CAAC,aAAa,CAAe,KAAyB,EAAS,OAAY;QAC9E,MAAM,MAAM,GAAG,eAAe,EAAE,CAAA;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAA;QACH,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACtC,MAAM,WAAW,GAAG,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAA;QAC9C,MAAM,WAAW,GAAG,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAA;QAE9C,IAAI,OAAgC,CAAA;QACpC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAS,EAAE,CAAC,CAAA;YACpG,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,SAAS,YAAY,CAAC,CAAA;YACvE,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;YAC/D,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACnD,CAAC;YACD,OAAO,GAAG,KAAK,CAAA;QACjB,CAAC;QAED,IAAA,+CAAoB,EAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QAEhD,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACjE,IAAI,aAAiC,CAAA;QAErC,IAAI,OAAO,IAAI,eAAe,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE;gBAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAA;YACF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;gBACnC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS;gBAClC,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,YAAY,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAU,CAAC,CAAC,CAAC,SAAS;aAC3E,CAAC,CAAA;YACF,aAAa,GAAG,KAAK,CAAC,EAAE,CAAA;YAExB;;;;eAIG;YACH,IAAI,CAAC;gBACH,MAAM,KAAK,GAAQ,IAAA,gCAAa,EAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBACzD,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,KAAK,CAAC,IAAI,GAAG,IAAA,kCAAe,EAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBACxE,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAG,EAAE,KAAK,CAAC,CAAA;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;YAED,IAAA,4CAAkB,EAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAS,CAAC,CAAA;YACzF,IAAA,oDAAsB,EAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,SAAS,EAAE,OAAO,CAAC,EAAG;gBACtB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAG,OAAe,CAAC,UAAU;gBACvC,QAAQ,EAAG,OAAe,CAAC,QAAQ;gBACnC,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,OAAO,EAAE,IAAI,EAAE,EAAE;aAClB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,OAAO;YAC1B,CAAC,CAAC,IAAA,gCAAe,EACb,MAAM,WAAW,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE;gBAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;aACvB,CAAC,EACF;gBACE,QAAQ,EAAE,qBAAqB;gBAC/B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;gBACpD,sFAAsF;gBACtF,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,OAAO,EAAG,OAAe,CAAC,WAAW;oBACnC,CAAC,CAAC,EAAE,IAAI,EAAG,OAAe,CAAC,WAAW,EAAE,aAAa,EAAG,OAAe,CAAC,oBAAoB,EAAE;oBAC9F,CAAC,CAAC,SAAS;aACd,CACF;YACH,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAE5F,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAClD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAA;gBACnC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA;gBAChH,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAC/F,IAAI,CAAC,OAAO,GAAG;oBACb,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE;oBACpC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,WAAW,EAAE,EAAE;iBAC3F,CAAA;YACV,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAqB,EAAC;YACzC,MAAM;YACN,QAAQ,EAAE,YAAmB;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,sBAAsB,EAAE,KAAK,CAAC,qBAAqB;SACpD,CAAC,CAAA;QAEF,IAAI,kBAAsC,CAAA;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;gBACpC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS;gBAClC,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/F,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1G,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,aAAa,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,aAAa,EAAU,CAAC,CAAC,CAAC,SAAS;aAC1E,CAAC,CAAA;YACF,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAA;YAE9B,IAAA,4CAAkB,EAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAS,CAAC,CAAA;YAC1F,+FAA+F;YAC/F,IAAA,oDAAsB,EAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,SAAS,EAAE,OAAO,CAAC,EAAG;gBACtB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAG,OAAe,CAAC,UAAU;gBACvC,QAAQ,EAAG,OAAe,CAAC,QAAQ;gBACnC,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,OAAO,EAAE,IAAI,EAAE,EAAE;aAClB,CAAC,CAAA;YAEF,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAG,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,OAAO,EAAE,IAAI;gBACb,GAAG,IAAA,gCAAa,EAAC,MAAM,CAAC,KAAK,CAAC;aACxB,CAAC,CAAA;QACX,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,SAAS,EAAE,OAAO,EAAE,EAAE;YACtB,aAAa;YACb,kBAAkB;YAClB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YAC1E,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACvE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;SACtF,CAAA;IACH,CAAC;CACF,CAAA;AAjLY,sDAAqB;AAiB1B;IAVL,IAAA,uBAAQ,EAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE;QACnC,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACF;;;;OAIG;;IACF,IAAA,wBAAS,EAAC,6DAA6D,CAAC;IACpD,mBAAA,IAAA,kBAAG,EAAC,OAAO,CAAC,CAAA;IAA6B,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAA1B,kBAAkB;;0DA+J1D;gCAhLU,qBAAqB;IADjC,IAAA,uBAAQ,GAAE;GACE,qBAAqB,CAiLjC","sourcesContent":["/*\n * The neutral door into a conversation.\n *\n * ── Why this exists (2026-09-11) ───────────────────────────────────────────────\n * The chat component moved here from `board-ai`, but the only mutation it could call stayed\n * behind. operato-figure mounted the dock, registered four tools, and got\n * `Cannot query field \"boardAIChat\" on type \"Mutation\"` — it does not load board-ai. The twin has\n * the same shape and it does not show: its space deliberation runs through board-ai's door purely\n * because the board authoring half of the same product already loaded that package.\n *\n * ── Why the board resolver was not moved ───────────────────────────────────────\n * `board-ai-resolver.ts` is 692 lines and the larger part of it is board authoring itself:\n * `currentBoard` as a BoardModel, PatchEntry, board patch broadcasts, refid injection for\n * component mentions. Moving that here would teach this package the board document, which is the\n * dependency we just cut, pointing the other way.\n *\n * So the door moved and the editor did not. `boardAIChat` stays in board-ai for board authoring;\n * this one is for a surface that asks questions and runs registered tools.\n *\n * ── What this is not ───────────────────────────────────────────────────────────\n * It has no document, so it takes no document and returns no patch. Tools that write to a\n * document are not offered here — `registryAssistantChat` enforces that, and it decides what may\n * be dispatched from the same list it offers, so the two cannot drift apart.\n */\nimport { Arg, Ctx, Directive, Field, InputType, Mutation, ObjectType, Resolver } from 'type-graphql'\nimport { GraphQLJSON } from 'graphql-scalars'\nimport '@things-factory/auth-base'\n\nimport { config } from '@things-factory/env'\nimport { getRepository } from '@things-factory/shell'\nimport { createAIClient, getDefaultAIClient, registryAssistantChat, type AIClient } from '@things-factory/ai-client-base'\n\nimport { ChatSession } from './chat-session/chat-session.js'\nimport { assertStationSession } from './chat-session/station-session-guard.js'\nimport { ChatMessage } from './chat-message/chat-message.js'\nimport { buildLlmHistory } from './chat-message/llm-history.js'\nimport { publishChatMessage } from './chat-message/chat-message-publish.js'\nimport { publishSessionActivity } from './chat-session/session-activity-publish.js'\nimport { activityPatch, autoSessionName } from './chat-session/session-inbox.js'\n\n/**\n * How many stored messages reach the model.\n *\n * A deliberation runs for days. Without a cap the prompt grows without bound and the oldest turns\n * bury the recent ones. Kept the same as the board conversation's cap so the two surfaces of one\n * product do not remember differently.\n */\nconst LLM_HISTORY_MAX_TURNS = 40\n\n@InputType()\nclass AssistantMessageInput {\n  @Field({ description: \"Role: 'user' or 'assistant'\" })\n  role: string\n\n  @Field({ description: 'Message content' })\n  content: string\n}\n\n@InputType({ description: 'One turn of a conversation that has no document of its own.' })\nclass AssistantChatInput {\n  @Field({\n    nullable: true,\n    description: 'ChatSession id. Omit for a one-off question with no persistence.'\n  })\n  sessionId?: string\n\n  @Field(() => [AssistantMessageInput], {\n    description:\n      'Conversation, newest last. For a persisted session only the last user message is appended; the rest is read from storage.'\n  })\n  messages: AssistantMessageInput[]\n\n  @Field({\n    description:\n      'Who the assistant is on this surface, in the words of the product that owns the screen. The rules for using each tool come from whoever registered it and are appended by the server.'\n  })\n  systemPrompt: string\n\n  @Field(() => [String], {\n    nullable: true,\n    description:\n      'Registered tool categories this conversation may use (registerToolCategory names, e.g. [\"figure-authoring\"]). Omit to allow every registered category. An empty list allows none — a plain conversation.'\n  })\n  toolCategories?: string[]\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description:\n      'What this surface is looking at (e.g. { figureId } while modelling). Tools read it so the model never has to ask the user for identifiers. Client-supplied — never used for authorization; a tool verifies the scope belongs to the caller tenant.'\n  })\n  hostContext?: any\n\n  @Field({\n    nullable: true,\n    description:\n      'Last message to keep from the stored history. The client keeps its own truncation when a user edits a message, so pass the last kept id to hide the retracted span from the model.'\n  })\n  truncateAfterMessageId?: string\n\n  @Field({\n    nullable: true,\n    description:\n      'Require a tool call before the model may answer. For surfaces that report live state, where an unchecked assertion reads the same as a checked one.'\n  })\n  requireGroundingTools?: boolean\n\n  @Field({ nullable: true, description: 'Model identifier override. Falls back to the configured default.' })\n  model?: string\n\n  @Field({ nullable: true, description: 'Sampling temperature override.' })\n  temperature?: number\n\n  @Field({ nullable: true, description: 'Max output tokens per call.' })\n  maxTokens?: number\n}\n\n@ObjectType()\nclass AssistantChatOutput {\n  @Field({ description: 'The reply, including the notice when the loop stopped early.' })\n  reply: string\n\n  @Field({ description: 'AI client identifier (provider:model).' })\n  clientId: string\n\n  @Field({ nullable: true, description: 'Echo of the session id, when persisted.' })\n  sessionId?: string\n\n  @Field({ nullable: true, description: 'Stored ChatMessage id of the user input.' })\n  userMessageId?: string\n\n  @Field({ nullable: true, description: 'Stored ChatMessage id of the reply.' })\n  assistantMessageId?: string\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description: 'Tool usages during the turn — {name, arguments, result, kind}. The surface shows them foldably.'\n  })\n  toolUsages?: any\n\n  @Field(() => [String], {\n    nullable: true,\n    description:\n      'Tool names offered to the model this turn. A surface that expected a category and sees it missing here knows the registration did not happen, rather than reading a vague answer as a refusal.'\n  })\n  offeredTools?: string[]\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description:\n      'Actions a tool recorded without executing — each carries what the tool returned alongside `proposed: true`. The surface renders a confirm button; executing is the user\\'s act.'\n  })\n  proposals?: any\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description:\n      'Identifiers in the reply that appear in nothing the model received. Hallucination candidates surfaced to the user; the reply itself is not altered. Null when the answer is grounded.'\n  })\n  groundingWarnings?: any\n}\n\nfunction resolveAIClient(): AIClient | undefined {\n  const existing = getDefaultAIClient()\n  if (existing) return existing\n  const cfg = config.get('aiClient', null) as any\n  if (cfg && cfg.provider) return createAIClient(cfg)\n  return undefined\n}\n\n@Resolver()\nexport class AssistantChatResolver {\n  /*\n   * No `@transaction`, for the same reason the board conversation has none: a model call takes\n   * seconds to tens of seconds, and holding a write lock for that long collides with everything\n   * else on SQLite. Writes are short and around the call. For a conversation, a partly stored\n   * history is safer than a lost one.\n   */\n  @Mutation(() => AssistantChatOutput, {\n    description:\n      'Ask the assistant a question on a surface that has no document of its own. Tools come from the registry; with a sessionId the conversation is persisted.'\n  })\n  /*\n   * `ai-assistant:mutation` — the same door as the board conversation's, which moved here on\n   * 2026-09-10. No `legacy` alias: this operation is new, so no one was ever passing under an old\n   * name, and declaring an alias would open a second name that nothing needs.\n   */\n  @Directive('@privilege(category: \"ai-assistant\", privilege: \"mutation\")')\n  async assistantChat(@Arg('input') input: AssistantChatInput, @Ctx() context: any): Promise<AssistantChatOutput> {\n    const client = resolveAIClient()\n    if (!client) {\n      throw new Error(\n        'No AI client configured. Set config.aiClient = { provider, model, apiKey } or call setDefaultAIClient(...).'\n      )\n    }\n\n    const { domain, user } = context.state\n    const sessionRepo = getRepository(ChatSession)\n    const messageRepo = getRepository(ChatMessage)\n\n    let session: ChatSession | undefined\n    if (input.sessionId) {\n      const found = await sessionRepo.findOneBy({ id: input.sessionId, domain: { id: domain.id } as any })\n      if (!found) throw new Error(`ChatSession ${input.sessionId} not found`)\n      if (found.anchorType === 'figure' && input.hostContext?.figureId !== found.anchorId) {\n        throw new Error('이 대화는 다른 Figure의 이력입니다. 현재 모델의 대화를 다시 여세요.')\n      }\n      if (found.anchorType === 'application' && (input.hostContext?.app !== found.anchorId || input.hostContext?.figureId)) {\n        throw new Error('애플리케이션 대화와 모델 대화를 구분해서 다시 여세요.')\n      }\n      session = found\n    }\n\n    assertStationSession(session, input.hostContext)\n\n    const lastUserMessage = input.messages[input.messages.length - 1]\n    let userMessageId: string | undefined\n\n    if (session && lastUserMessage?.role === 'user') {\n      const previousLast = await messageRepo.findOne({\n        where: { session: { id: session.id } as any },\n        order: { createdAt: 'DESC' }\n      })\n      const saved = await messageRepo.save({\n        session: { id: session.id } as any,\n        role: 'user',\n        content: lastUserMessage.content,\n        creator: user,\n        updater: user,\n        parentMessage: previousLast ? ({ id: previousLast.id } as any) : undefined\n      })\n      userMessageId = saved.id\n\n      /*\n       * Session activity is denormalised for the list: most-recent ordering and another\n       * participant's unread badge read it. Best effort — a conversation must not fail because a\n       * list sorts one position late.\n       */\n      try {\n        const patch: any = activityPatch(lastUserMessage.content)\n        if (!session.name) patch.name = autoSessionName(lastUserMessage.content)\n        await sessionRepo.update(session.id!, patch)\n      } catch {\n        /* noop */\n      }\n\n      publishChatMessage({ domainId: domain.id, sessionId: session.id, message: saved } as any)\n      publishSessionActivity({\n        domainId: domain.id,\n        sessionId: session.id!,\n        kind: 'message',\n        anchorType: (session as any).anchorType,\n        anchorId: (session as any).anchorId,\n        preview: lastUserMessage.content,\n        actorId: user?.id\n      })\n    }\n\n    const conversation = session\n      ? buildLlmHistory(\n          await messageRepo.find({\n            where: { session: { id: session.id } as any },\n            order: { createdAt: 'ASC' },\n            relations: ['creator']\n          }),\n          {\n            maxTurns: LLM_HISTORY_MAX_TURNS,\n            truncateAfterMessageId: input.truncateAfterMessageId,\n            /* The message just stored is this turn's question — truncation must never drop it. */\n            keepMessageIds: userMessageId ? [userMessageId] : undefined,\n            summary: (session as any).lastSummary\n              ? { text: (session as any).lastSummary, upToMessageId: (session as any).summaryUpToMessageId }\n              : undefined\n          }\n        )\n      : input.messages.map(message => ({ role: message.role as any, content: message.content }))\n\n    if (input.hostContext?.image?.data && conversation.length > 0) {\n      const last = conversation[conversation.length - 1]\n      if (last.role === 'user' && typeof last.content === 'string') {\n        const raw = input.hostContext.image\n        const rawData = typeof raw.data === 'string' ? raw.data.replace(/^data:image\\/[a-zA-Z]+;base64,/, '') : raw.data\n        const buf = typeof rawData === 'string' ? Buffer.from(rawData, 'base64') : Buffer.from(rawData)\n        last.content = [\n          { type: 'text', text: last.content },\n          { type: 'image', source: { kind: 'base64', data: buf, mediaType: raw.mediaType || 'image/png' } }\n        ] as any\n      }\n    }\n\n    const result = await registryAssistantChat({\n      client,\n      messages: conversation as any,\n      systemPrompt: input.systemPrompt,\n      toolCategories: input.toolCategories,\n      hostContext: input.hostContext,\n      state: context.state,\n      model: input.model,\n      temperature: input.temperature,\n      maxTokens: input.maxTokens,\n      requireToolOnFirstTurn: input.requireGroundingTools\n    })\n\n    let assistantMessageId: string | undefined\n    if (session) {\n      const stored = await messageRepo.save({\n        session: { id: session.id } as any,\n        role: 'assistant',\n        content: result.reply,\n        toolUsages: result.loop.toolUsages?.length ? JSON.stringify(result.loop.toolUsages) : undefined,\n        groundingWarnings: result.groundingWarnings?.length ? JSON.stringify(result.groundingWarnings) : undefined,\n        creator: user,\n        updater: user,\n        parentMessage: userMessageId ? ({ id: userMessageId } as any) : undefined\n      })\n      assistantMessageId = stored.id\n\n      publishChatMessage({ domainId: domain.id, sessionId: session.id, message: stored } as any)\n      /* The reply is session activity too. Leaving it out shows other participants \"nothing new\". */\n      publishSessionActivity({\n        domainId: domain.id,\n        sessionId: session.id!,\n        kind: 'message',\n        anchorType: (session as any).anchorType,\n        anchorId: (session as any).anchorId,\n        preview: result.reply,\n        actorId: user?.id\n      })\n\n      await sessionRepo.update(session.id!, {\n        aiClientId: client.id,\n        updater: user,\n        ...activityPatch(result.reply)\n      } as any)\n    }\n\n    return {\n      reply: result.reply,\n      clientId: client.id,\n      sessionId: session?.id,\n      userMessageId,\n      assistantMessageId,\n      toolUsages: result.loop.toolUsages?.length ? result.loop.toolUsages : null,\n      offeredTools: result.offeredTools,\n      proposals: result.loop.proposals?.length ? result.loop.proposals : null,\n      groundingWarnings: result.groundingWarnings?.length ? result.groundingWarnings : null\n    }\n  }\n}\n"]}
+{"version":3,"file":"assistant-chat-resolver.js","sourceRoot":"","sources":["../../server/service/assistant-chat-resolver.ts"],"names":[],"mappings":";;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,+CAAoG;AACpG,qDAA6C;AAC7C,qCAAkC;AAElC,6CAA4C;AAC5C,iDAAqD;AACrD,mEAAyH;AAEzH,oEAA4D;AAC5D,sFAA8E;AAC9E,oEAA4D;AAC5D,kEAA+D;AAC/D,oFAA2E;AAC3E,4FAAmF;AACnF,sEAAgF;AAChF,qDAAgD;AAEhD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAGhC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;CAM1B,CAAA;AAJC;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;mDAC1C;AAGZ;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;;sDAC3B;AALX,qBAAqB;IAD1B,IAAA,wBAAS,GAAE;GACN,qBAAqB,CAM1B;AAGD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;CAuDvB,CAAA;AAlDC;IAJC,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,kEAAkE;KAChF,CAAC;;qDACgB;AAMlB;IAJC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE;QACpC,WAAW,EACT,2HAA2H;KAC9H,CAAC;;oDAC+B;AAMjC;IAJC,IAAA,oBAAK,EAAC;QACL,WAAW,EACT,uLAAuL;KAC1L,CAAC;;wDACkB;AAOpB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,+OAA+O;KAClP,CAAC;;0DACuB;AAOzB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,oPAAoP;KACvP,CAAC;;uDACe;AAOjB;IALC,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,oLAAoL;KACvL,CAAC;;kEAC6B;AAO/B;IALC,IAAA,oBAAK,EAAC;QACL,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,qJAAqJ;KACxJ,CAAC;;iEAC6B;AAG/B;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kEAAkE,EAAE,CAAC;;iDAC7F;AAGd;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;;uDACrD;AAGpB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;qDACpD;AAtDd,kBAAkB;IADvB,IAAA,wBAAS,EAAC,EAAE,WAAW,EAAE,6DAA6D,EAAE,CAAC;GACpF,kBAAkB,CAuDvB;AAGD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CA0CxB,CAAA;AAxCC;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;;kDAC1E;AAGb;IADC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;;qDACjD;AAGhB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;;sDAChE;AAGlB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;;0DAC7D;AAGtB;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;;+DACnD;AAM3B;IAJC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,iGAAiG;KAC/G,CAAC;;uDACc;AAOhB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACrB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,gMAAgM;KACnM,CAAC;;yDACqB;AAOvB;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,iLAAiL;KACpL,CAAC;;sDACa;AAOf;IALC,IAAA,oBAAK,EAAC,GAAG,EAAE,CAAC,6BAAW,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,uLAAuL;KAC1L,CAAC;;8DACqB;AAzCnB,mBAAmB;IADxB,IAAA,yBAAU,GAAE;GACP,mBAAmB,CA0CxB;AAED,SAAS,eAAe;IACtB,MAAM,QAAQ,GAAG,IAAA,mCAAkB,GAAE,CAAA;IACrC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,GAAG,GAAG,YAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAQ,CAAA;IAC/C,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAA,+BAAc,EAAC,GAAG,CAAC,CAAA;IACnD,OAAO,SAAS,CAAA;AAClB,CAAC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC;;;;;OAKG;IAWG,AAAN,KAAK,CAAC,aAAa,CAAe,KAAyB,EAAS,OAAY;QAC9E,MAAM,MAAM,GAAG,eAAe,EAAE,CAAA;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAA;QACH,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QACtC,MAAM,WAAW,GAAG,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAA;QAC9C,MAAM,WAAW,GAAG,IAAA,qBAAa,EAAC,6BAAW,CAAC,CAAA;QAE9C,IAAI,OAAgC,CAAA;QACpC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAS,EAAE,CAAC,CAAA;YACpG,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC,SAAS,YAAY,CAAC,CAAA;YACvE,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;YAC/D,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACrH,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACnD,CAAC;YACD,OAAO,GAAG,KAAK,CAAA;QACjB,CAAC;QAED,IAAA,+CAAoB,EAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QAEhD,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACjE,IAAI,aAAiC,CAAA;QAErC,IAAI,OAAO,IAAI,eAAe,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE;gBAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAA;YACF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;gBACnC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS;gBAClC,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,YAAY,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAU,CAAC,CAAC,CAAC,SAAS;aAC3E,CAAC,CAAA;YACF,aAAa,GAAG,KAAK,CAAC,EAAE,CAAA;YAExB;;;;eAIG;YACH,IAAI,CAAC;gBACH,MAAM,KAAK,GAAQ,IAAA,gCAAa,EAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBACzD,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,KAAK,CAAC,IAAI,GAAG,IAAA,kCAAe,EAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBACxE,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAG,EAAE,KAAK,CAAC,CAAA;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;YAED,IAAA,4CAAkB,EAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAS,CAAC,CAAA;YACzF,IAAA,oDAAsB,EAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,SAAS,EAAE,OAAO,CAAC,EAAG;gBACtB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAG,OAAe,CAAC,UAAU;gBACvC,QAAQ,EAAG,OAAe,CAAC,QAAQ;gBACnC,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,OAAO,EAAE,IAAI,EAAE,EAAE;aAClB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,OAAO;YAC1B,CAAC,CAAC,IAAA,gCAAe,EACb,MAAM,WAAW,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE;gBAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;aACvB,CAAC,EACF;gBACE,QAAQ,EAAE,qBAAqB;gBAC/B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;gBACpD,sFAAsF;gBACtF,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,OAAO,EAAG,OAAe,CAAC,WAAW;oBACnC,CAAC,CAAC,EAAE,IAAI,EAAG,OAAe,CAAC,WAAW,EAAE,aAAa,EAAG,OAAe,CAAC,oBAAoB,EAAE;oBAC9F,CAAC,CAAC,SAAS;aACd,CACF;YACH,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAE5F,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;YAClD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAA;gBACnC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA;gBAChH,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAC/F,IAAI,CAAC,OAAO,GAAG;oBACb,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE;oBACpC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,WAAW,EAAE,EAAE;iBAC3F,CAAA;YACV,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAqB,EAAC;YACzC,MAAM;YACN,QAAQ,EAAE,YAAmB;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,IAAA,8BAAa,EAAC,OAAO,CAAC;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,sBAAsB,EAAE,KAAK,CAAC,qBAAqB;SACpD,CAAC,CAAA;QAEF,IAAI,kBAAsC,CAAA;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;gBACpC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAS;gBAClC,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/F,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1G,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,aAAa,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,aAAa,EAAU,CAAC,CAAC,CAAC,SAAS;aAC1E,CAAC,CAAA;YACF,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAA;YAE9B,IAAA,4CAAkB,EAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAS,CAAC,CAAA;YAC1F,+FAA+F;YAC/F,IAAA,oDAAsB,EAAC;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,SAAS,EAAE,OAAO,CAAC,EAAG;gBACtB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAG,OAAe,CAAC,UAAU;gBACvC,QAAQ,EAAG,OAAe,CAAC,QAAQ;gBACnC,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,OAAO,EAAE,IAAI,EAAE,EAAE;aAClB,CAAC,CAAA;YAEF,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAG,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,OAAO,EAAE,IAAI;gBACb,GAAG,IAAA,gCAAa,EAAC,MAAM,CAAC,KAAK,CAAC;aACxB,CAAC,CAAA;QACX,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,SAAS,EAAE,OAAO,EAAE,EAAE;YACtB,aAAa;YACb,kBAAkB;YAClB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YAC1E,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACvE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;SACtF,CAAA;IACH,CAAC;CACF,CAAA;AAlLY,sDAAqB;AAiB1B;IAVL,IAAA,uBAAQ,EAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE;QACnC,WAAW,EACT,0JAA0J;KAC7J,CAAC;IACF;;;;OAIG;;IACF,IAAA,wBAAS,EAAC,6DAA6D,CAAC;IACpD,mBAAA,IAAA,kBAAG,EAAC,OAAO,CAAC,CAAA;IAA6B,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAA1B,kBAAkB;;0DAgK1D;gCAjLU,qBAAqB;IADjC,IAAA,uBAAQ,GAAE;GACE,qBAAqB,CAkLjC","sourcesContent":["/*\n * The neutral door into a conversation.\n *\n * ── Why this exists (2026-09-11) ───────────────────────────────────────────────\n * The chat component moved here from `board-ai`, but the only mutation it could call stayed\n * behind. operato-figure mounted the dock, registered four tools, and got\n * `Cannot query field \"boardAIChat\" on type \"Mutation\"` — it does not load board-ai. The twin has\n * the same shape and it does not show: its space deliberation runs through board-ai's door purely\n * because the board authoring half of the same product already loaded that package.\n *\n * ── Why the board resolver was not moved ───────────────────────────────────────\n * `board-ai-resolver.ts` is 692 lines and the larger part of it is board authoring itself:\n * `currentBoard` as a BoardModel, PatchEntry, board patch broadcasts, refid injection for\n * component mentions. Moving that here would teach this package the board document, which is the\n * dependency we just cut, pointing the other way.\n *\n * So the door moved and the editor did not. `boardAIChat` stays in board-ai for board authoring;\n * this one is for a surface that asks questions and runs registered tools.\n *\n * ── What this is not ───────────────────────────────────────────────────────────\n * It has no document, so it takes no document and returns no patch. Tools that write to a\n * document are not offered here — `registryAssistantChat` enforces that, and it decides what may\n * be dispatched from the same list it offers, so the two cannot drift apart.\n */\nimport { Arg, Ctx, Directive, Field, InputType, Mutation, ObjectType, Resolver } from 'type-graphql'\nimport { GraphQLJSON } from 'graphql-scalars'\nimport '@things-factory/auth-base'\n\nimport { config } from '@things-factory/env'\nimport { getRepository } from '@things-factory/shell'\nimport { createAIClient, getDefaultAIClient, registryAssistantChat, type AIClient } from '@things-factory/ai-client-base'\n\nimport { ChatSession } from './chat-session/chat-session.js'\nimport { assertStationSession } from './chat-session/station-session-guard.js'\nimport { ChatMessage } from './chat-message/chat-message.js'\nimport { buildLlmHistory } from './chat-message/llm-history.js'\nimport { publishChatMessage } from './chat-message/chat-message-publish.js'\nimport { publishSessionActivity } from './chat-session/session-activity-publish.js'\nimport { activityPatch, autoSessionName } from './chat-session/session-inbox.js'\nimport { toolAccessFor } from './tool-access.js'\n\n/**\n * How many stored messages reach the model.\n *\n * A deliberation runs for days. Without a cap the prompt grows without bound and the oldest turns\n * bury the recent ones. Kept the same as the board conversation's cap so the two surfaces of one\n * product do not remember differently.\n */\nconst LLM_HISTORY_MAX_TURNS = 40\n\n@InputType()\nclass AssistantMessageInput {\n  @Field({ description: \"Role: 'user' or 'assistant'\" })\n  role: string\n\n  @Field({ description: 'Message content' })\n  content: string\n}\n\n@InputType({ description: 'One turn of a conversation that has no document of its own.' })\nclass AssistantChatInput {\n  @Field({\n    nullable: true,\n    description: 'ChatSession id. Omit for a one-off question with no persistence.'\n  })\n  sessionId?: string\n\n  @Field(() => [AssistantMessageInput], {\n    description:\n      'Conversation, newest last. For a persisted session only the last user message is appended; the rest is read from storage.'\n  })\n  messages: AssistantMessageInput[]\n\n  @Field({\n    description:\n      'Who the assistant is on this surface, in the words of the product that owns the screen. The rules for using each tool come from whoever registered it and are appended by the server.'\n  })\n  systemPrompt: string\n\n  @Field(() => [String], {\n    nullable: true,\n    description:\n      'Registered tool categories this conversation may use (registerToolCategory names, e.g. [\"figure-authoring\"]). Omitted or empty allows none — a plain conversation. A tool that declares a privilege is offered only to a caller who holds it.'\n  })\n  toolCategories?: string[]\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description:\n      'What this surface is looking at (e.g. { figureId } while modelling). Tools read it so the model never has to ask the user for identifiers. Client-supplied — never used for authorization; a tool verifies the scope belongs to the caller tenant.'\n  })\n  hostContext?: any\n\n  @Field({\n    nullable: true,\n    description:\n      'Last message to keep from the stored history. The client keeps its own truncation when a user edits a message, so pass the last kept id to hide the retracted span from the model.'\n  })\n  truncateAfterMessageId?: string\n\n  @Field({\n    nullable: true,\n    description:\n      'Require a tool call before the model may answer. For surfaces that report live state, where an unchecked assertion reads the same as a checked one.'\n  })\n  requireGroundingTools?: boolean\n\n  @Field({ nullable: true, description: 'Model identifier override. Falls back to the configured default.' })\n  model?: string\n\n  @Field({ nullable: true, description: 'Sampling temperature override.' })\n  temperature?: number\n\n  @Field({ nullable: true, description: 'Max output tokens per call.' })\n  maxTokens?: number\n}\n\n@ObjectType()\nclass AssistantChatOutput {\n  @Field({ description: 'The reply, including the notice when the loop stopped early.' })\n  reply: string\n\n  @Field({ description: 'AI client identifier (provider:model).' })\n  clientId: string\n\n  @Field({ nullable: true, description: 'Echo of the session id, when persisted.' })\n  sessionId?: string\n\n  @Field({ nullable: true, description: 'Stored ChatMessage id of the user input.' })\n  userMessageId?: string\n\n  @Field({ nullable: true, description: 'Stored ChatMessage id of the reply.' })\n  assistantMessageId?: string\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description: 'Tool usages during the turn — {name, arguments, result, kind}. The surface shows them foldably.'\n  })\n  toolUsages?: any\n\n  @Field(() => [String], {\n    nullable: true,\n    description:\n      'Tool names offered to the model this turn. A surface that expected a category and sees it missing here knows the registration did not happen, rather than reading a vague answer as a refusal.'\n  })\n  offeredTools?: string[]\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description:\n      'Actions a tool recorded without executing — each carries what the tool returned alongside `proposed: true`. The surface renders a confirm button; executing is the user\\'s act.'\n  })\n  proposals?: any\n\n  @Field(() => GraphQLJSON, {\n    nullable: true,\n    description:\n      'Identifiers in the reply that appear in nothing the model received. Hallucination candidates surfaced to the user; the reply itself is not altered. Null when the answer is grounded.'\n  })\n  groundingWarnings?: any\n}\n\nfunction resolveAIClient(): AIClient | undefined {\n  const existing = getDefaultAIClient()\n  if (existing) return existing\n  const cfg = config.get('aiClient', null) as any\n  if (cfg && cfg.provider) return createAIClient(cfg)\n  return undefined\n}\n\n@Resolver()\nexport class AssistantChatResolver {\n  /*\n   * No `@transaction`, for the same reason the board conversation has none: a model call takes\n   * seconds to tens of seconds, and holding a write lock for that long collides with everything\n   * else on SQLite. Writes are short and around the call. For a conversation, a partly stored\n   * history is safer than a lost one.\n   */\n  @Mutation(() => AssistantChatOutput, {\n    description:\n      'Ask the assistant a question on a surface that has no document of its own. Tools come from the registry; with a sessionId the conversation is persisted.'\n  })\n  /*\n   * `ai-assistant:mutation` — the same door as the board conversation's, which moved here on\n   * 2026-09-10. No `legacy` alias: this operation is new, so no one was ever passing under an old\n   * name, and declaring an alias would open a second name that nothing needs.\n   */\n  @Directive('@privilege(category: \"ai-assistant\", privilege: \"mutation\")')\n  async assistantChat(@Arg('input') input: AssistantChatInput, @Ctx() context: any): Promise<AssistantChatOutput> {\n    const client = resolveAIClient()\n    if (!client) {\n      throw new Error(\n        'No AI client configured. Set config.aiClient = { provider, model, apiKey } or call setDefaultAIClient(...).'\n      )\n    }\n\n    const { domain, user } = context.state\n    const sessionRepo = getRepository(ChatSession)\n    const messageRepo = getRepository(ChatMessage)\n\n    let session: ChatSession | undefined\n    if (input.sessionId) {\n      const found = await sessionRepo.findOneBy({ id: input.sessionId, domain: { id: domain.id } as any })\n      if (!found) throw new Error(`ChatSession ${input.sessionId} not found`)\n      if (found.anchorType === 'figure' && input.hostContext?.figureId !== found.anchorId) {\n        throw new Error('이 대화는 다른 Figure의 이력입니다. 현재 모델의 대화를 다시 여세요.')\n      }\n      if (found.anchorType === 'application' && (input.hostContext?.app !== found.anchorId || input.hostContext?.figureId)) {\n        throw new Error('애플리케이션 대화와 모델 대화를 구분해서 다시 여세요.')\n      }\n      session = found\n    }\n\n    assertStationSession(session, input.hostContext)\n\n    const lastUserMessage = input.messages[input.messages.length - 1]\n    let userMessageId: string | undefined\n\n    if (session && lastUserMessage?.role === 'user') {\n      const previousLast = await messageRepo.findOne({\n        where: { session: { id: session.id } as any },\n        order: { createdAt: 'DESC' }\n      })\n      const saved = await messageRepo.save({\n        session: { id: session.id } as any,\n        role: 'user',\n        content: lastUserMessage.content,\n        creator: user,\n        updater: user,\n        parentMessage: previousLast ? ({ id: previousLast.id } as any) : undefined\n      })\n      userMessageId = saved.id\n\n      /*\n       * Session activity is denormalised for the list: most-recent ordering and another\n       * participant's unread badge read it. Best effort — a conversation must not fail because a\n       * list sorts one position late.\n       */\n      try {\n        const patch: any = activityPatch(lastUserMessage.content)\n        if (!session.name) patch.name = autoSessionName(lastUserMessage.content)\n        await sessionRepo.update(session.id!, patch)\n      } catch {\n        /* noop */\n      }\n\n      publishChatMessage({ domainId: domain.id, sessionId: session.id, message: saved } as any)\n      publishSessionActivity({\n        domainId: domain.id,\n        sessionId: session.id!,\n        kind: 'message',\n        anchorType: (session as any).anchorType,\n        anchorId: (session as any).anchorId,\n        preview: lastUserMessage.content,\n        actorId: user?.id\n      })\n    }\n\n    const conversation = session\n      ? buildLlmHistory(\n          await messageRepo.find({\n            where: { session: { id: session.id } as any },\n            order: { createdAt: 'ASC' },\n            relations: ['creator']\n          }),\n          {\n            maxTurns: LLM_HISTORY_MAX_TURNS,\n            truncateAfterMessageId: input.truncateAfterMessageId,\n            /* The message just stored is this turn's question — truncation must never drop it. */\n            keepMessageIds: userMessageId ? [userMessageId] : undefined,\n            summary: (session as any).lastSummary\n              ? { text: (session as any).lastSummary, upToMessageId: (session as any).summaryUpToMessageId }\n              : undefined\n          }\n        )\n      : input.messages.map(message => ({ role: message.role as any, content: message.content }))\n\n    if (input.hostContext?.image?.data && conversation.length > 0) {\n      const last = conversation[conversation.length - 1]\n      if (last.role === 'user' && typeof last.content === 'string') {\n        const raw = input.hostContext.image\n        const rawData = typeof raw.data === 'string' ? raw.data.replace(/^data:image\\/[a-zA-Z]+;base64,/, '') : raw.data\n        const buf = typeof rawData === 'string' ? Buffer.from(rawData, 'base64') : Buffer.from(rawData)\n        last.content = [\n          { type: 'text', text: last.content },\n          { type: 'image', source: { kind: 'base64', data: buf, mediaType: raw.mediaType || 'image/png' } }\n        ] as any\n      }\n    }\n\n    const result = await registryAssistantChat({\n      client,\n      messages: conversation as any,\n      systemPrompt: input.systemPrompt,\n      toolCategories: input.toolCategories,\n      toolAccess: toolAccessFor(context),\n      hostContext: input.hostContext,\n      state: context.state,\n      model: input.model,\n      temperature: input.temperature,\n      maxTokens: input.maxTokens,\n      requireToolOnFirstTurn: input.requireGroundingTools\n    })\n\n    let assistantMessageId: string | undefined\n    if (session) {\n      const stored = await messageRepo.save({\n        session: { id: session.id } as any,\n        role: 'assistant',\n        content: result.reply,\n        toolUsages: result.loop.toolUsages?.length ? JSON.stringify(result.loop.toolUsages) : undefined,\n        groundingWarnings: result.groundingWarnings?.length ? JSON.stringify(result.groundingWarnings) : undefined,\n        creator: user,\n        updater: user,\n        parentMessage: userMessageId ? ({ id: userMessageId } as any) : undefined\n      })\n      assistantMessageId = stored.id\n\n      publishChatMessage({ domainId: domain.id, sessionId: session.id, message: stored } as any)\n      /* The reply is session activity too. Leaving it out shows other participants \"nothing new\". */\n      publishSessionActivity({\n        domainId: domain.id,\n        sessionId: session.id!,\n        kind: 'message',\n        anchorType: (session as any).anchorType,\n        anchorId: (session as any).anchorId,\n        preview: result.reply,\n        actorId: user?.id\n      })\n\n      await sessionRepo.update(session.id!, {\n        aiClientId: client.id,\n        updater: user,\n        ...activityPatch(result.reply)\n      } as any)\n    }\n\n    return {\n      reply: result.reply,\n      clientId: client.id,\n      sessionId: session?.id,\n      userMessageId,\n      assistantMessageId,\n      toolUsages: result.loop.toolUsages?.length ? result.loop.toolUsages : null,\n      offeredTools: result.offeredTools,\n      proposals: result.loop.proposals?.length ? result.loop.proposals : null,\n      groundingWarnings: result.groundingWarnings?.length ? result.groundingWarnings : null\n    }\n  }\n}\n"]}

package/dist-server/service/index.d.ts

@@ -5,6 +5,7 @@ import { ChatMessageSubscription } from './chat-message/chat-message-subscriptio
 export * from './types.js';
 export * from './chat-session-resolver.js';
 export * from './assistant-chat-resolver.js';
+export * from './tool-access.js';
 export * from './subscribe-auth.js';
 export * from './chat-session/session-anchor.js';
 export * from './chat-session/index.js';

package/dist-server/service/index.js

@@ -12,6 +12,7 @@ const index_js_3 = require("./chat-session-participant/index.js");
 tslib_1.__exportStar(require("./types.js"), exports);
 tslib_1.__exportStar(require("./chat-session-resolver.js"), exports);
 tslib_1.__exportStar(require("./assistant-chat-resolver.js"), exports);
+tslib_1.__exportStar(require("./tool-access.js"), exports);
 tslib_1.__exportStar(require("./subscribe-auth.js"), exports);
 /* 앵커 순수 로직 — 호스트가 앵커 종류를 참조한다(리졸버는 데코레이터 때문에 무겁다). */
 tslib_1.__exportStar(require("./chat-session/session-anchor.js"), exports);

package/dist-server/service/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/service/index.ts"],"names":[],"mappings":";;;;AAAA,yEAAgE;AAChE,6EAAoE;AACpE,sGAA+F;AAC/F,8FAAqF;AACrF,sDAAyE;AACzE,sDAAyE;AACzE,kEAAgG;AAEhG,qDAA0B;AAC1B,qEAA0C;AAC1C,uEAA4C;AAC5C,8DAAmC;AACnC,sDAAsD;AACtD,2EAAgD;AAChD,kEAAuC;AACvC,8DAA8D;AAC9D,0EAA+C;AAC/C,qFAA0D;AAC1D,uFAA4D;AAC5D,wEAA6C;AAC7C,4EAAiD;AACjD,yEAA8C;AAC9C,iFAAsD;AACtD,mFAAwD;AACxD,4FAAiE;AACjE,iFAAsD;AACtD,kEAAuC;AACvC,8EAAmD;AAEtC,QAAA,QAAQ,GAAG,CAAC,GAAG,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,GAAG,mBAA8B,CAAC,CAAA;AAE9F,QAAA,MAAM,GAAG;IACpB,eAAe,EAAE;QACf,8CAAmB;QACnB,sDAAsD;QACtD,kDAAqB;QACrB,sDAAuB;QACvB,qDAAqD;QACrD,gEAA6B;KAC9B;CACF,CAAA","sourcesContent":["import { ChatSessionResolver } from './chat-session-resolver.js'\nimport { AssistantChatResolver } from './assistant-chat-resolver.js'\nimport { MySessionActivitySubscription } from './chat-session/session-activity-subscription.js'\nimport { ChatMessageSubscription } from './chat-message/chat-message-subscription.js'\nimport { entities as ChatSessionEntities } from './chat-session/index.js'\nimport { entities as ChatMessageEntities } from './chat-message/index.js'\nimport { entities as ChatSessionParticipantEntities } from './chat-session-participant/index.js'\n\nexport * from './types.js'\nexport * from './chat-session-resolver.js'\nexport * from './assistant-chat-resolver.js'\nexport * from './subscribe-auth.js'\n/* 앵커 순수 로직 — 호스트가 앵커 종류를 참조한다(리졸버는 데코레이터 때문에 무겁다). */\nexport * from './chat-session/session-anchor.js'\nexport * from './chat-session/index.js'\n/* 순수 로직들 — 호스트(board-ai 등)가 같은 규칙을 쓰라고 공개한다. 베끼면 한쪽만 고쳐진다. */\nexport * from './chat-session/session-inbox.js'\nexport * from './chat-session/session-activity-publish.js'\nexport * from './chat-session/session-activity-broadcast.js'\nexport * from './chat-message/llm-history.js'\nexport * from './chat-message/history-summary.js'\nexport * from './chat-message/fold-history.js'\nexport * from './chat-message/chat-message-publish.js'\nexport * from './chat-message/chat-message-broadcast.js'\nexport * from './chat-session-participant/invite-notification.js'\nexport * from './chat-session-participant/presence.js'\nexport * from './chat-message/index.js'\nexport * from './chat-session-participant/index.js'\n\nexport const entities = [...ChatSessionEntities, ...ChatMessageEntities, ...ChatSessionParticipantEntities]\n\nexport const schema = {\n  resolverClasses: [\n    ChatSessionResolver,\n    /* 문서를 갖지 않은 표면의 대화 — board 를 안 싣는 제품이 물어볼 수 있는 자리. */\n    AssistantChatResolver,\n    ChatMessageSubscription,\n    /* 내가 참여한 모든 세션의 활동 — 창을 닫아 둔 표면이 배지·목록을 갱신할 수 있게. */\n    MySessionActivitySubscription\n  ]\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../server/service/index.ts"],"names":[],"mappings":";;;;AAAA,yEAAgE;AAChE,6EAAoE;AACpE,sGAA+F;AAC/F,8FAAqF;AACrF,sDAAyE;AACzE,sDAAyE;AACzE,kEAAgG;AAEhG,qDAA0B;AAC1B,qEAA0C;AAC1C,uEAA4C;AAC5C,2DAAgC;AAChC,8DAAmC;AACnC,sDAAsD;AACtD,2EAAgD;AAChD,kEAAuC;AACvC,8DAA8D;AAC9D,0EAA+C;AAC/C,qFAA0D;AAC1D,uFAA4D;AAC5D,wEAA6C;AAC7C,4EAAiD;AACjD,yEAA8C;AAC9C,iFAAsD;AACtD,mFAAwD;AACxD,4FAAiE;AACjE,iFAAsD;AACtD,kEAAuC;AACvC,8EAAmD;AAEtC,QAAA,QAAQ,GAAG,CAAC,GAAG,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,GAAG,mBAA8B,CAAC,CAAA;AAE9F,QAAA,MAAM,GAAG;IACpB,eAAe,EAAE;QACf,8CAAmB;QACnB,sDAAsD;QACtD,kDAAqB;QACrB,sDAAuB;QACvB,qDAAqD;QACrD,gEAA6B;KAC9B;CACF,CAAA","sourcesContent":["import { ChatSessionResolver } from './chat-session-resolver.js'\nimport { AssistantChatResolver } from './assistant-chat-resolver.js'\nimport { MySessionActivitySubscription } from './chat-session/session-activity-subscription.js'\nimport { ChatMessageSubscription } from './chat-message/chat-message-subscription.js'\nimport { entities as ChatSessionEntities } from './chat-session/index.js'\nimport { entities as ChatMessageEntities } from './chat-message/index.js'\nimport { entities as ChatSessionParticipantEntities } from './chat-session-participant/index.js'\n\nexport * from './types.js'\nexport * from './chat-session-resolver.js'\nexport * from './assistant-chat-resolver.js'\nexport * from './tool-access.js'\nexport * from './subscribe-auth.js'\n/* 앵커 순수 로직 — 호스트가 앵커 종류를 참조한다(리졸버는 데코레이터 때문에 무겁다). */\nexport * from './chat-session/session-anchor.js'\nexport * from './chat-session/index.js'\n/* 순수 로직들 — 호스트(board-ai 등)가 같은 규칙을 쓰라고 공개한다. 베끼면 한쪽만 고쳐진다. */\nexport * from './chat-session/session-inbox.js'\nexport * from './chat-session/session-activity-publish.js'\nexport * from './chat-session/session-activity-broadcast.js'\nexport * from './chat-message/llm-history.js'\nexport * from './chat-message/history-summary.js'\nexport * from './chat-message/fold-history.js'\nexport * from './chat-message/chat-message-publish.js'\nexport * from './chat-message/chat-message-broadcast.js'\nexport * from './chat-session-participant/invite-notification.js'\nexport * from './chat-session-participant/presence.js'\nexport * from './chat-message/index.js'\nexport * from './chat-session-participant/index.js'\n\nexport const entities = [...ChatSessionEntities, ...ChatMessageEntities, ...ChatSessionParticipantEntities]\n\nexport const schema = {\n  resolverClasses: [\n    ChatSessionResolver,\n    /* 문서를 갖지 않은 표면의 대화 — board 를 안 싣는 제품이 물어볼 수 있는 자리. */\n    AssistantChatResolver,\n    ChatMessageSubscription,\n    /* 내가 참여한 모든 세션의 활동 — 창을 닫아 둔 표면이 배지·목록을 갱신할 수 있게. */\n    MySessionActivitySubscription\n  ]\n}\n"]}

package/dist-server/service/tool-access.d.ts

@@ -0,0 +1,4 @@
+import type { ToolAccessCheck } from '@things-factory/ai-client-base';
+export declare function toolAccessFor(context: {
+    state?: any;
+} | undefined): ToolAccessCheck;

package/dist-server/service/tool-access.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toolAccessFor = toolAccessFor;
+/*
+ * Who may use a registered tool — the request's answer to `ToolAccessCheck`.
+ *
+ * `ai-client-base` decides *which* tools a conversation may use but does not know auth, so the
+ * conversation doors hand it this. A tool declares the same `{ category, privilege }` its GraphQL
+ * door uses (A1, 2026-09-17), and this asks exactly what `@privilege` on that door would ask: the
+ * same `checkPermission`, with the request's user, domain, address safety and prohibited list.
+ * Asking anything looser here would make the tool a second, softer way into that door.
+ */
+const auth_base_1 = require("@things-factory/auth-base");
+function toolAccessFor(context) {
+    const { domain, user, unsafeIP, prohibitedPrivileges } = context?.state ?? {};
+    return async (privilege) => {
+        /* No caller, no answer — a request without a user or domain holds no privilege. */
+        if (!user || !domain)
+            return false;
+        return !!(await (0, auth_base_1.checkPermission)({ category: privilege.category, privilege: privilege.privilege, owner: privilege.owner, super: privilege.super }, user, domain, unsafeIP, prohibitedPrivileges));
+    };
+}
+//# sourceMappingURL=tool-access.js.map

package/dist-server/service/tool-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-access.js","sourceRoot":"","sources":["../../server/service/tool-access.ts"],"names":[],"mappings":";;AAYA,sCAcC;AA1BD;;;;;;;;GAQG;AACH,yDAA2D;AAG3D,SAAgB,aAAa,CAAC,OAAoC;IAChE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;IAE7E,OAAO,KAAK,EAAE,SAAwB,EAAE,EAAE;QACxC,mFAAmF;QACnF,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAClC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAA,2BAAe,EAC7B,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EAChH,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,oBAAoB,CACrB,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC","sourcesContent":["/*\n * Who may use a registered tool — the request's answer to `ToolAccessCheck`.\n *\n * `ai-client-base` decides *which* tools a conversation may use but does not know auth, so the\n * conversation doors hand it this. A tool declares the same `{ category, privilege }` its GraphQL\n * door uses (A1, 2026-09-17), and this asks exactly what `@privilege` on that door would ask: the\n * same `checkPermission`, with the request's user, domain, address safety and prohibited list.\n * Asking anything looser here would make the tool a second, softer way into that door.\n */\nimport { checkPermission } from '@things-factory/auth-base'\nimport type { ToolAccessCheck, ToolPrivilege } from '@things-factory/ai-client-base'\n\nexport function toolAccessFor(context: { state?: any } | undefined): ToolAccessCheck {\n  const { domain, user, unsafeIP, prohibitedPrivileges } = context?.state ?? {}\n\n  return async (privilege: ToolPrivilege) => {\n    /* No caller, no answer — a request without a user or domain holds no privilege. */\n    if (!user || !domain) return false\n    return !!(await checkPermission(\n      { category: privilege.category, privilege: privilege.privilege, owner: privilege.owner, super: privilege.super },\n      user,\n      domain,\n      unsafeIP,\n      prohibitedPrivileges\n    ))\n  }\n}\n"]}

package/dist-server/tool-registry-boot-report.d.ts

@@ -0,0 +1,3 @@
+import { type ToolRegistryWarning } from '@things-factory/ai-client-base';
+/** One line per code: the code, how many, and which tools. Empty when there is nothing to report. */
+export declare function formatToolRegistryWarnings(warnings: ReadonlyArray<ToolRegistryWarning>): string[];

package/dist-server/tool-registry-boot-report.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatToolRegistryWarnings = formatToolRegistryWarnings;
+/*
+ * At boot, say which registered tools are not yet what the tool contract requires (A1 stage one).
+ *
+ * Registration no longer refuses a tool that changes something without declaring its privilege —
+ * refusing would stop apps whose tools predate the field. The registry records each omission as a
+ * code instead. This prints that list once, after every module has registered, grouped by code,
+ * so the person starting the server sees which tools still need a declaration. When the list is
+ * empty across the apps, registration becomes a refusal and this report goes away.
+ */
+const env_1 = require("@things-factory/env");
+const ai_client_base_1 = require("@things-factory/ai-client-base");
+/** One line per code: the code, how many, and which tools. Empty when there is nothing to report. */
+function formatToolRegistryWarnings(warnings) {
+    const byCode = new Map();
+    for (const warning of warnings) {
+        const tools = byCode.get(warning.code) ?? [];
+        tools.push(`${warning.params.category}/${warning.params.tool}(${warning.params.kind})`);
+        byCode.set(warning.code, tools);
+    }
+    return [...byCode].map(([code, tools]) => `[ai-assistant] ${code} ×${tools.length}: ${tools.join(', ')}`);
+}
+process.on('bootstrap-module-start', () => {
+    for (const line of formatToolRegistryWarnings((0, ai_client_base_1.getToolRegistryWarnings)()))
+        env_1.logger.warn(line);
+});
+//# sourceMappingURL=tool-registry-boot-report.js.map

package/dist-server/tool-registry-boot-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry-boot-report.js","sourceRoot":"","sources":["../server/tool-registry-boot-report.ts"],"names":[],"mappings":";;AAaA,gEAQC;AArBD;;;;;;;;GAQG;AACH,6CAA4C;AAC5C,mEAAkG;AAElG,qGAAqG;AACrG,SAAgB,0BAA0B,CAAC,QAA4C;IACrF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAA;QACvF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACjC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,kBAAkB,IAAI,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC3G,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,wBAA+B,EAAE,GAAG,EAAE;IAC/C,KAAK,MAAM,IAAI,IAAI,0BAA0B,CAAC,IAAA,wCAAuB,GAAE,CAAC;QAAE,YAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC7F,CAAC,CAAC,CAAA","sourcesContent":["/*\n * At boot, say which registered tools are not yet what the tool contract requires (A1 stage one).\n *\n * Registration no longer refuses a tool that changes something without declaring its privilege —\n * refusing would stop apps whose tools predate the field. The registry records each omission as a\n * code instead. This prints that list once, after every module has registered, grouped by code,\n * so the person starting the server sees which tools still need a declaration. When the list is\n * empty across the apps, registration becomes a refusal and this report goes away.\n */\nimport { logger } from '@things-factory/env'\nimport { getToolRegistryWarnings, type ToolRegistryWarning } from '@things-factory/ai-client-base'\n\n/** One line per code: the code, how many, and which tools. Empty when there is nothing to report. */\nexport function formatToolRegistryWarnings(warnings: ReadonlyArray<ToolRegistryWarning>): string[] {\n  const byCode = new Map<string, string[]>()\n  for (const warning of warnings) {\n    const tools = byCode.get(warning.code) ?? []\n    tools.push(`${warning.params.category}/${warning.params.tool}(${warning.params.kind})`)\n    byCode.set(warning.code, tools)\n  }\n  return [...byCode].map(([code, tools]) => `[ai-assistant] ${code} ×${tools.length}: ${tools.join(', ')}`)\n}\n\nprocess.on('bootstrap-module-start' as any, () => {\n  for (const line of formatToolRegistryWarnings(getToolRegistryWarnings())) logger.warn(line)\n})\n"]}